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IN THE CLAIMS 

For the convenience of the Examiner, all pending claims of the present Application 
are presented below whether or not an amendment has been made. Please amend the 
claims as follows: 



1 . (Canceled) 

2. (Canceled) 

3. (Canceled) 

4. (Canceled) 

5. (Canceled) 

6. (Canceled) 

7. (Canceled) 

8. (Canceled) 

9. (Canceled) 

10. (Canceled) 

11. (Canceled) 

12. (Canceled) 

13. (Canceled) 
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14. 
15. 
16. 
17. 
18. 
19. 
20. 
21. 
22. 
23. 
24. 
25. 
26. 



(Canceled) 
(Canceled) 
(Canceled) 
(Canceled) 
(Canceled) 
(Canceled) 
(Canceled) 
(Canceled) 
(Canceled) 
(Canceled) 
(Canceled) 
(Canceled) 
(Canceled) 
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27. (New) A method for preventing hostile use of computer resources by an 
application running on a workstation, comprising: 

providing a filter on a workstation for receiving internal requests for computer 
resources resident on the workstation; 

receiving at the filter a request for access identifying a computer resource resident 
on the workstation, the request for access generated by an unspecified application 
downloaded to the workstation from a source external to the workstation, the unspecified 
application not identifiable in a pre-set list of hostile applications; 

determining whether the requested computer resource is on a list of one or more 
computer resources that are not accessible to unspecified applications; 

allowing access to the requested computer resource if the requested computer 
resource is not on the list; and 

preventing access to the requested computer resource if the requested computer 
resource is on the list. 

28. (New) The method of Claim 27, wherein the list of one or more computer 
resources comprises a look-up table. 

29. (New) The method of Claim 27, wherein the requested computer resource 
is selected from the group consisting of a memory allocation, a file, and a directory. 

30. (New) The method of Claim 27, wherein the requested computer resource 
is selected from the group consisting of a copy command, a delete command, and a 
compress command. 

3 1 . (New) The method of Claim 27, wherein the requested computer resource 
comprises an operation that when performed leads to a permanent change in the 
workstation. 
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32. (New) The method of Claim 27, wherein receiving the request comprises 
receiving a direct request generated by the unspecified application. 

33. (New) The method of Claim 27, wherein receiving the request comprises 
receiving an indirect request generated by the unspecified application. 

34. (New) The method of Claim 27, wherein the list of one or more computer 
resources comprises a list of one or more computer resources that the unspecified 
application may use during operations performed by the unspecified application. 
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35. (New) A method for preventing hostile use of computer resources by an 
application running on a workstation, comprising: 

providing a filter on a workstation for receiving internal requests for computer 
resources resident on the workstation; 

receiving at the filter a request for access from an application resident on the 
workstation, the request for access identifying a computer resource resident on the 
workstation, 

determining if the request for access has exceeded a pre-set threshold identifying a 
limited number of processes that may be initiated by the application; 

allowing access to the requested computer resource if the request for access has not 
exceeded the pre-set threshold; and 

preventing access to the requested computer resource if the request for access has 
exceeded the pre-set threshold. 

36. (New) The method of Claim 35, wherein the application from which the 
request for access is received comprises an unspecified application downloaded to the 
workstation from a source external to the workstation, the unspecified application not 
identifiable in a pre-set list of hostile applications. 

37. (New) The method of Claim 35, wherein the requested computer resource 
is selected from the group consisting of a memory allocation, a file, and a directory. 

38. (New) The method of Claim 35, wherein the requested computer resource 
is selected from the group consisting of a copy command, a delete command, and a 
compress command. 

39. (New) The method of Claim 35, wherein the requested computer resource 
comprises an operation that when performed leads to a permanent change in the 
workstation. 
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40. (New) The method of Claim 35, wherein receiving the request comprises 
receiving a direct request generated by the unspecified application. 

41. (New) The method of Claim 35, wherein receiving the request comprises 
receiving an indirect request generated by the unspecified application. 

42. (New) A workstation for preventing hostile use of computer resources by 
an application running on the workstation, comprising: 

a memory operable to store one or more applications, at least one application 
comprising an unspecified application received from the network as a downloadable 
application, the unspecified application not identifiable in a pre-set list of hostile 
applications; and 

a processor coupled to the memory and operable to: 

maintain a list of one or more computer resources that are not accessible to 
any unspecified applications; 

in response to a request received from the unspecified application, 
determine whether a requested computer resource is on a list of one or more computer 
resources that are not accessible to any unspecified applications; 

allow access to the requested computer resource if the requested computer 
resource is not on the list; and 

prevent access to the requested computer resource if the requested 
computer resource is on the list. 

43. (New) The workstation of Claim 42, wherein the list of one or more 
computer resources comprises a look-up table. 

44. (New) The workstation of Claim 42, wherein the requested computer 
resource is selected from the group consisting of a memory allocation, a file, and a 
directory. 
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45. (New) The workstation of Claim 42, wherein the requested computer 
resource is selected from the group consisting of a copy command, a delete command, and 
a compress command. 

46. (New) The workstation of Claim 42, wherein the requested computer 
resource comprises an operation that when performed leads to a permanent change in the 
workstation. 

47. (New) The workstation of Claim 42, wherein the request from the 
unspecified application comprises a direct request. 

48. (New) The workstation of Claim 42, wherein the request from the 
unspecified application comprises an indirect request. 

49. (New) The workstation of Claim 42, wherein the list of one or more 
computer resources comprises a list of one or more computer resources that the 
unspecified application may use during operations performed by the unspecified 
application. 
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50. (New) A workstation for preventing hostile use of computer resources by 
an application running on the workstation, comprising: 

a memory operable to store one or more applications; and 

a processor in communication with the memory and operable to: 

in response to a received request for access, determine if the request has 
exceeded a pre-set threshold identifying a limited number of processes that may be 
initiated by an application; 

allow access to the requested computer resource if the request for access 
has not exceeded the pre-set threshold; and 

prevent access to the requested computer resource if the request for access 
has exceeded the pre-set threshold. 

51. (New) The workstation of Claim 50, wherein at least one of the one or 
more applications comprise an unspecified application downloaded to the workstation 
from a source external to the workstation, the unspecified application not identifiable in a 
pre-set list of hostile applications. 

52. (New) The workstation of Claim 50, wherein the requested computer 
resource is selected from the group consisting of a memory allocation, a file, and a 
directory. 

53. (New) The workstation of Claim 50, wherein the requested computer 
resource is selected from the group consisting of a copy command, a delete command, and 
a compress command. 

54. (New) The workstation of Claim 50, wherein the requested computer 
resource comprises an operation that when performed leads to a permanent change in the 
workstation. 
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55. (New) The workstation of Claim 50 5 wherein the request from the 
unspecified application comprises a direct request. 

56. (New) The workstation of Claim 50, wherein the request from the 
unspecified application comprises an indirect request. 

57. (New) Logic for preventing hostile use of computer resources by an 
application running on a workstation, the logic encoded in media and operable when 
executed to: 

provide a filter on a workstation for receiving internal requests for computer 
resources resident on the workstation; 

receive at the filter a request for access identifying a computer resource resident on 
the workstation, the request for access generated by an unspecified application 
downloaded to the workstation from a source external to the workstation, the unspecified 
application not identifiable in a pre-set list of hostile applications; 

determine whether the requested computer resource is on a list of one or more 
computer resources that are not accessible to unspecified applications; 

allow access to the requested computer resource if the requested computer resource 
is not on the list; and 

prevent access to the requested computer resource if the requested computer 
resource is on the list. 

58. (New) The logic of Claim 57, wherein the list of one or more computer 
resources comprises a look-up table. 

59. (New) The logic of Claim 57, wherein the requested computer resource is 
selected from the group consisting of a memory allocation, a file, and a directory. 
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60. (New) The logic of Claim 57, wherein the requested computer resource is 
selected from the group consisting of a copy command, a delete command, and a compress 
command. 

61. (New) The logic of Claim 57, wherein the requested computer resource 
comprises an operation that when performed leads to a permanent change in the 
workstation. 

62. (New) The logic of Claim 57, wherein receiving the request comprises 
receiving a direct request generated by the unspecified application. 

63. (New) The logic of Claim 57, wherein receiving the request comprises 
receiving an indirect request generated by the unspecified application. 

64. (New) The logic of Claim 57, wherein the list of one or more computer 
resources comprises a list of one or more computer resources that the unspecified 
application may use during operations performed by the unspecified application. 
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65. (New) Logic for preventing hostile use of computer resources by an 
application running on a workstation, the logic encoded in media and operable when 
executed to: 

provide a filter on a workstation for receiving internal requests for computer 
resources resident on the workstation; 

receive at the filter a request for access from an application resident on the 
workstation, the request for access identifying a computer resource resident on the 
workstation, 

determine if the request for access has exceeded a pre-set threshold identifying a 
limited number of processes that may be initiated by the application; 

allow access to the requested computer resource if the request for access has not 
exceeded the pre-set threshold; and 

prevent access to the requested computer resource if the request for access has 
exceeded the pre-set threshold. 

66. (New) The logic of Claim 65, wherein the application from which the 
request for access is received comprises an unspecified application downloaded to the 
workstation from a source external to the workstation, the unspecified application not 
identifiable in a pre-set list of hostile applications. 

67. (New) The logic of Claim 65, wherein the requested computer resource is 
selected from the group consisting of a memory allocation, a file, and a directory. 

68. (New) The logic of Claim 65, wherein the requested computer resource is 
selected from the group consisting of a copy command, a delete command, and a compress 
command. 

69. (New) The logic of Claim 65, wherein the requested computer resource 
comprises an operation that when performed leads to a permanent change in the 
workstation. 
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70. (New) The logic of Claim 65, wherein receiving the request comprises 
receiving a direct request generated by the unspecified application. 

71. (New) The logic of Claim 65, wherein receiving the request comprises 
receiving an indirect request generated by the unspecified application. 
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